The Risk Committee delegates to the management, the design and setting of risk management parameters, who would work with relevant stakeholders of its business and operation units to identify key risk areas to be assessed and risk control measures formulated to mitigate and guide each local and regional office. The key risk management areas would be regularly reviewed to identify areas for improvement, from which where necessary, the development of policies and procedures for the Group to manage and control risks that might have an impact on the Group and the principal subsidiary including potential risks in critical business areas that are both strategic and operational levels, to ensure business continuity, to optimise business result, and to ensure compliance with the relevant rules and regulations. [...] The Risk Committee reviews the adequacy and effectiveness of the risk management and internal control systems and internal audits are conducted as part of ongoing review on the effectiveness of the risk management and internal control systems. Emerging risks that may have an impact on the Group are also discussed in the Risk Committee meetings and shared with the Audit Committee.